OpenSSL fixed HollowByte after 11-byte TLS requests could strand memory on glibc systems, but shipped no CVE, advisory, or ...
My SSH jump box was supposed to make remote access easier, not invite the entire internet to guess passwords.